install Google-Authenticator app on whatever device you prefer
Then you do this on Ubuntu 11.10 (oneric):
git clone https://code.google.com/p/google-authenticator/
install libqrencode library
install libpam0g-dev
cd google-authenticator
sudo make install
run google-authenticator
Time-based tokens: Y
Scan the QR code you get up on screen with your authenticator app
Update .google-authenticator file: Y
Disallow use of same authentication token: Y
Increase window for time-skew: N
Rate-limiting: Y
insert auth required pam_google_authenticator-so into your /etc/pam.d/sshd file
sudo restart ssh
go.
Good news: it's in the repos!
ReplyDelete$ sudo apt-get install libpam-google-authenticator